last executing test programs: 1m56.040119484s ago: executing program 3 (id=2692): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='j', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=']', 0x1}], 0x1}}], 0x2, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/255, 0xff}], 0x1, &(0x7f0000000980)=""/210, 0xd2}, 0xce}], 0x1, 0x40002002, 0x0) 1m55.867520734s ago: executing program 3 (id=2696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000010, 0x0, 0x8000800000}, {0xb1d, 0x0, 0x6}]}) 1m55.589443076s ago: executing program 3 (id=2700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 1m55.470627196s ago: executing program 3 (id=2704): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1m55.280643001s ago: executing program 3 (id=2708): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1m55.188358824s ago: executing program 3 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000000000000220000c0000000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m40.092262853s ago: executing program 32 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000000000000220000c0000000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.643116856s ago: executing program 4 (id=4512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 3.420180972s ago: executing program 4 (id=4513): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 2.824900215s ago: executing program 5 (id=4524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec8500000050000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) 2.707967086s ago: executing program 5 (id=4526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) 1.501565059s ago: executing program 5 (id=4545): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x5) 1.490650328s ago: executing program 0 (id=4546): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000000c0)={r1}) 1.353024847s ago: executing program 5 (id=4549): prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.313498062s ago: executing program 0 (id=4550): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) 1.31207332s ago: executing program 1 (id=4551): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) 1.149931418s ago: executing program 0 (id=4553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a80180001800900040006"], 0x38}, 0x1, 0x0, 0x0, 0x2048080}, 0x40000) 1.123854947s ago: executing program 1 (id=4554): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f00000024c0), 0x28}, 0x4) 1.076269835s ago: executing program 5 (id=4555): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001ac0), 0x0, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}]}}) 970.387902ms ago: executing program 2 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003"], 0x68}}, 0x0) 969.772015ms ago: executing program 1 (id=4557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2a813, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180), 0x8) 932.047735ms ago: executing program 0 (id=4558): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000000), 0x1) 875.501567ms ago: executing program 4 (id=4559): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 873.338889ms ago: executing program 5 (id=4560): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 821.217601ms ago: executing program 1 (id=4561): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000009c0)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f0000000980)={0x0}) 778.767027ms ago: executing program 2 (id=4562): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x100000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x400007, "7718eff3a851893e633c901c7595f60b"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x50}}, 0x0) 770.831389ms ago: executing program 0 (id=4563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388a846008100290008004500005800000000082fac1414bbe00000020420880b"], 0x0) 666.564455ms ago: executing program 1 (id=4564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) 652.078163ms ago: executing program 0 (id=4565): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x64, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x2e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffd, [{0x0, 0x3, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23"}]}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 570.400039ms ago: executing program 2 (id=4566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) 512.67918ms ago: executing program 1 (id=4567): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000340)=0x80, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 392.200031ms ago: executing program 2 (id=4568): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 354.700263ms ago: executing program 4 (id=4569): mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x2, 0x5000003a, r0, 0x0) 279.548785ms ago: executing program 4 (id=4570): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) 186.06832ms ago: executing program 4 (id=4571): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 78.42282ms ago: executing program 2 (id=4572): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) 0s ago: executing program 2 (id=4573): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) kernel console output (not intermixed with test programs): denied { setopt } for pid=12888 comm="syz.4.3050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.515169][T12885] bridge0: port 3(dummy0) entered forwarding state [ 251.542191][ T5821] Bluetooth: hci2: command tx timeout [ 251.583532][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 251.598987][ T29] audit: type=1400 audit(1737369532.905:1213): avc: denied { write } for pid=12892 comm="syz.4.3052" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 251.599338][T12893] random: crng reseeded on system resumption [ 251.632477][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.640736][ T46] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 251.663476][ T46] usb 2-1: config 0 has no interface number 0 [ 251.682352][ T46] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 251.691665][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.692182][ T29] audit: type=1400 audit(1737369532.905:1214): avc: denied { open } for pid=12892 comm="syz.4.3052" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 251.719128][ T46] usb 2-1: Product: syz [ 251.731655][ T46] usb 2-1: Manufacturer: syz [ 251.747806][ T46] usb 2-1: SerialNumber: syz [ 251.791445][ T46] usb 2-1: config 0 descriptor?? [ 251.815030][ T46] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 251.944709][T12905] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 251.963503][T12905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.082594][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.204271][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.223210][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.448226][ T29] audit: type=1400 audit(1737369533.755:1215): avc: denied { ioctl } for pid=12892 comm="syz.4.3052" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.473197][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.481230][ T5867] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 252.492402][ T5852] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.600432][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 252.623344][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 252.643062][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.651329][ T5867] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 252.661950][ T5852] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 252.667324][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.681887][ T5852] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.687749][ T5867] usb 1-1: Product: syz [ 252.697716][ T5867] usb 1-1: Manufacturer: syz [ 252.703359][ T5852] usb 6-1: config 0 has no interface number 0 [ 252.712158][ T5852] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 252.714937][ T5867] usb 1-1: SerialNumber: syz [ 252.735991][ T5852] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.752154][ T5867] usb 1-1: config 0 descriptor?? [ 252.761526][ T5867] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 029 [ 252.778204][ T5852] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 252.792732][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.800967][ T5852] usb 6-1: Product: syz [ 252.806930][ T5852] usb 6-1: Manufacturer: syz [ 252.811632][ T5852] usb 6-1: SerialNumber: syz [ 252.818688][ T5852] usb 6-1: config 0 descriptor?? [ 252.847436][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 252.847767][ T5863] usb 2-1: USB disconnect, device number 31 [ 252.865284][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 252.880062][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 252.891682][ T5863] quatech2 2-1:0.51: device disconnected [ 253.002231][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 253.154664][ T9] usb 3-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 253.165152][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.174818][ T5867] (null): failure reading functionality [ 253.184094][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 253.194684][ T5867] i2c i2c-1: connected i2c-tiny-usb device [ 253.200747][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.211617][ T9] usb 3-1: SerialNumber: syz [ 253.445229][ T5852] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.117/input/input40 [ 253.457661][ T9] usb 3-1: invalid UAC_HEADER (v1) [ 253.488721][ T5863] usb 1-1: USB disconnect, device number 29 [ 253.495066][ T29] audit: type=1400 audit(1737369534.785:1216): avc: denied { create } for pid=12920 comm="syz.4.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 253.532667][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 253.548732][ T9] usb 3-1: USB disconnect, device number 29 [ 253.678583][ T5867] usb 6-1: USB disconnect, device number 3 [ 253.693431][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.834626][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 253.834642][ T29] audit: type=1400 audit(1737369535.145:1218): avc: denied { create } for pid=12931 comm="syz.1.3068" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.891913][ T29] audit: type=1400 audit(1737369535.195:1219): avc: denied { unlink } for pid=5826 comm="syz-executor" name="file0" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 254.452134][ T29] audit: type=1400 audit(1737369535.735:1220): avc: denied { write } for pid=12957 comm="syz.4.3080" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 254.556453][ T29] audit: type=1400 audit(1737369535.745:1221): avc: denied { ioctl } for pid=12957 comm="syz.4.3080" path="net:[4026533092]" dev="nsfs" ino=4026533092 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 254.734584][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.743664][ T29] audit: type=1400 audit(1737369535.855:1222): avc: denied { write } for pid=12959 comm="syz.2.3082" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 254.833028][T12971] Bluetooth: MGMT ver 1.23 [ 254.955433][T12975] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 255.122533][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.339584][ T29] audit: type=1400 audit(1737369536.635:1223): avc: denied { setattr } for pid=12991 comm="syz.1.3094" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 255.586273][T13005] binder: binder_mmap: 13002 20000000-20b36000 bad vm_flags failed -1 [ 255.592103][ T29] audit: type=1400 audit(1737369536.895:1224): avc: denied { map } for pid=13002 comm="syz.1.3099" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.731294][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 255.766466][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766660][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.772847][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793127][ T29] audit: type=1400 audit(1737369537.095:1225): avc: denied { getopt } for pid=13015 comm="syz.1.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 256.230488][T13035] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.602413][T13051] bond0: option mode: unable to set because the bond device has slaves [ 256.766851][T13059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.812769][ T29] audit: type=1400 audit(1737369538.115:1226): avc: denied { append } for pid=13061 comm="syz.2.3123" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.813516][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.852175][ T2144] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 256.973777][T13065] netlink: 243 bytes leftover after parsing attributes in process `syz.4.3124'. [ 256.992195][T13065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.038203][ T2144] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 257.061029][ T2144] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 257.067005][ T29] audit: type=1400 audit(1737369538.375:1227): avc: denied { map } for pid=13068 comm="syz.5.3126" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 257.095191][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.096549][ T2144] usb 1-1: config 0 has no interface number 0 [ 257.130962][ T2144] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 65535, setting to 64 [ 257.156341][T13073] @: renamed from vlan0 (while UP) [ 257.161579][ T2144] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.183236][ T2144] usb 1-1: config 0 interface 52 has no altsetting 0 [ 257.191701][ T2144] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 257.230902][ T2144] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 257.263430][ T2144] usb 1-1: Product: syz [ 257.272361][ T2144] usb 1-1: SerialNumber: syz [ 257.302480][ T2144] usb 1-1: config 0 descriptor?? [ 257.518106][ T2144] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input41 [ 257.576108][T13094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3138'. [ 257.683632][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.721250][ T2144] usb 1-1: USB disconnect, device number 30 [ 257.853473][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.162989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.547996][ T2144] hid-generic 0005:15C2:FFFA.0024: item fetching failed at offset 0/2 [ 258.563602][ T2144] hid-generic 0005:15C2:FFFA.0024: probe with driver hid-generic failed with error -22 [ 258.822155][ T5867] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 258.882656][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.984814][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.009881][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.039213][ T5867] usb 6-1: New USB device found, idVendor=3305, idProduct=01ed, bcdDevice= 0.00 [ 259.066649][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.074916][ T5863] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 259.108231][ T5867] usb 6-1: config 0 descriptor?? [ 259.242385][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 259.254164][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 259.272391][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.290583][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.304002][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.315837][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.333350][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 259.340898][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.352579][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.365239][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.376624][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.389635][ T5863] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 259.398045][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.412754][ T5863] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.426292][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.437549][ T5863] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.451859][ T5863] usb 1-1: string descriptor 0 read error: -22 [ 259.458418][ T5863] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 259.468183][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.481694][ T5863] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 259.537950][ T5867] hid-generic 0003:3305:01ED.0025: hidraw0: USB HID v0.00 Device [HID 3305:01ed] on usb-dummy_hcd.5-1/input0 [ 259.549520][T13174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13174 comm=syz.1.3172 [ 259.780111][ T46] usb 6-1: USB disconnect, device number 4 [ 259.783354][ T5867] usb 1-1: USB disconnect, device number 31 [ 259.922512][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.490039][T13217] ref_ctr_offset mismatch. inode: 0x1c8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 260.682156][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 260.682174][ T29] audit: type=1400 audit(1737369541.985:1232): avc: denied { create } for pid=13229 comm="syz.5.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.708850][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.786754][ T29] audit: type=1400 audit(1737369542.025:1233): avc: denied { bind } for pid=13229 comm="syz.5.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.807263][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.872819][ T5867] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 260.919601][T13242] netlink: 'syz.2.3205': attribute type 21 has an invalid length. [ 260.940656][T13244] input: syz0 as /devices/virtual/input/input42 [ 260.956722][T13242] netlink: 'syz.2.3205': attribute type 6 has an invalid length. [ 260.983458][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.013185][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3205'. [ 261.022187][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 261.036961][ T5867] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 261.048021][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.068181][ T5867] usb 2-1: config 0 descriptor?? [ 261.076709][T13248] netlink: 'syz.2.3205': attribute type 21 has an invalid length. [ 261.090589][ T5867] gspca_main: sunplus-2.14.0 probing 041e:400b [ 261.122759][T13248] netlink: 'syz.2.3205': attribute type 6 has an invalid length. [ 261.131133][T13248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3205'. [ 261.212192][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.319141][ T29] audit: type=1400 audit(1737369542.625:1234): avc: denied { write } for pid=13254 comm="syz.0.3210" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 261.342223][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.383964][T13260] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 261.506771][ T5867] gspca_sunplus: reg_w_riv err -71 [ 261.511977][ T5867] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 261.556803][ T5867] usb 2-1: USB disconnect, device number 32 [ 261.691731][ T29] audit: type=1400 audit(1737369542.995:1235): avc: denied { watch_mount watch_reads } for pid=13272 comm="syz.4.3218" path="pipe:[4709]" dev="pipefs" ino=4709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 261.802224][ T29] audit: type=1400 audit(1737369543.105:1236): avc: denied { ioctl } for pid=13277 comm="syz.4.3220" path="socket:[40721]" dev="sockfs" ino=40721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 261.827287][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.837046][ T46] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 261.852181][ T2144] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 262.004743][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.035582][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.048674][ T2144] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 262.063611][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.075227][ T2144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.089660][ T46] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 262.100328][ T2144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 262.122315][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.140572][ T46] usb 6-1: config 0 descriptor?? [ 262.145721][ T2144] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 262.161114][ T2144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.179046][ T2144] usb 1-1: config 0 descriptor?? [ 262.184767][ T29] audit: type=1400 audit(1737369543.485:1237): avc: denied { ioctl } for pid=13288 comm="syz.1.3224" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 262.586405][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.602209][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.609393][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.632165][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.638950][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.653039][ T2144] isku 0003:1E7D:319C.0027: item fetching failed at offset 5/7 [ 262.662464][ T2144] isku 0003:1E7D:319C.0027: parse failed [ 262.668166][ T2144] isku 0003:1E7D:319C.0027: probe with driver isku failed with error -22 [ 262.678576][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.686392][ T46] elo 0003:04E7:0009.0026: unknown main item tag 0x0 [ 262.704177][ T46] elo 0003:04E7:0009.0026: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.5-1/input0 [ 262.780412][ T29] audit: type=1400 audit(1737369544.085:1238): avc: denied { shutdown } for pid=13303 comm="syz.1.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.829369][ T2144] usb 6-1: USB disconnect, device number 5 [ 262.849089][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 262.860048][T13306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 262.913259][ T5867] usb 1-1: USB disconnect, device number 32 [ 262.930950][ T29] audit: type=1400 audit(1737369544.235:1239): avc: denied { map } for pid=13307 comm="syz.1.3233" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 262.992139][ T29] audit: type=1400 audit(1737369544.265:1240): avc: denied { execute } for pid=13307 comm="syz.1.3233" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.059216][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.285897][T13325] veth3: entered allmulticast mode [ 263.552970][T13334] netlink: 'syz.4.3245': attribute type 2 has an invalid length. [ 264.082606][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.223567][ T29] audit: type=1400 audit(1737369545.515:1241): avc: denied { append } for pid=13364 comm="syz.2.3259" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.262432][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.018570][T13400] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 265.123548][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.194602][ T5867] IPVS: starting estimator thread 0... [ 265.322215][T13412] IPVS: using max 23 ests per chain, 55200 per kthread [ 265.376335][T13420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.802160][ T5867] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 265.842166][ T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 265.952243][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 265.963581][ T5867] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 265.974202][ T5867] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 266.000591][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.015096][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 266.028488][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.039763][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.048248][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 266.065458][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.080756][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.101675][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.114514][ T5867] usbtmc 3-1:16.0: bulk endpoints not found [ 266.133881][ T8] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 266.150216][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.159318][ T8] usb 5-1: Product: syz [ 266.164329][ T8] usb 5-1: Manufacturer: syz [ 266.169022][ T8] usb 5-1: SerialNumber: syz [ 266.172316][ T2144] net_ratelimit: 1 callbacks suppressed [ 266.172331][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.183126][ T8] usb 5-1: config 0 descriptor?? [ 266.194931][T13435] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 266.426912][ T8] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 266.452010][ T8] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 266.778161][ C0] powermate: config urb returned -71 [ 266.785947][ C0] powermate: config urb returned -71 [ 266.791672][ C0] powermate: config urb returned -71 [ 266.797235][ C0] powermate: config urb returned -71 [ 266.822659][ T8] usb 5-1: USB disconnect, device number 38 [ 266.828628][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 267.204058][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.288935][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.297490][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.698515][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 267.698533][ T29] audit: type=1400 audit(1737369549.005:1258): avc: denied { set_context_mgr } for pid=13497 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 267.724828][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.782155][ T29] audit: type=1400 audit(1737369549.075:1259): avc: denied { listen } for pid=13499 comm="syz.1.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 267.958343][ T29] audit: type=1400 audit(1737369549.255:1260): avc: denied { bind } for pid=13507 comm="syz.5.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.980201][ T29] audit: type=1400 audit(1737369549.255:1261): avc: denied { connect } for pid=13507 comm="syz.5.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.049182][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'. [ 268.242341][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.590903][ T5863] usb 3-1: USB disconnect, device number 30 [ 268.826703][ T29] audit: type=1400 audit(1737369550.135:1262): avc: denied { unmount } for pid=8318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 268.941153][T13557] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3341'. [ 268.960642][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'. [ 269.253871][ T29] audit: type=1400 audit(1737369550.565:1263): avc: denied { bind } for pid=13573 comm="syz.2.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.273331][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.305566][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.422230][T13580] netlink: 'syz.4.3353': attribute type 25 has an invalid length. [ 269.430275][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3353'. [ 269.490768][T13586] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 269.567043][ T29] audit: type=1400 audit(1737369550.875:1264): avc: denied { ioctl } for pid=13587 comm="syz.2.3358" path="socket:[42305]" dev="sockfs" ino=42305 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.882238][ T29] audit: type=1400 audit(1737369551.175:1265): avc: denied { create } for pid=13602 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 270.086659][T13618] netlink: 'syz.2.3370': attribute type 2 has an invalid length. [ 270.114097][T13618] netlink: 16138 bytes leftover after parsing attributes in process `syz.2.3370'. [ 270.322733][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.330882][ T5863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.377789][T13637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.648142][ T29] audit: type=1400 audit(1737369551.955:1266): avc: denied { map } for pid=13648 comm="syz.1.3383" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 271.061986][T13677] virtio-fs: tag <(null)> not found [ 271.151773][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 271.178107][ T29] audit: type=1400 audit(1737369552.485:1267): avc: denied { ioctl } for pid=13684 comm="syz.0.3399" path="socket:[41902]" dev="sockfs" ino=41902 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.331484][T13694] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 271.912498][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 272.093713][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 272.103782][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 272.113770][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.121793][ T8] usb 1-1: Product: syz [ 272.146593][ T8] usb 1-1: Manufacturer: syz [ 272.162233][ T8] usb 1-1: SerialNumber: syz [ 272.184087][ T8] usb 1-1: config 0 descriptor?? [ 272.196477][ T8] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 272.236931][T13726] loop9: detected capacity change from 0 to 8 [ 272.260323][T13726] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 272.292138][T13726] loop9: partition table partially beyond EOD, truncated [ 272.307066][T13726] loop9: p1 size 81768186 extends beyond EOD, truncated [ 272.402308][ T5867] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 272.424711][ T8] gspca_sn9c2028: read1 error -32 [ 272.430330][ T8] gspca_sn9c2028: read1 error -32 [ 272.553931][ T5867] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 272.572363][ T5867] usb 3-1: config 0 has no interface number 0 [ 272.581485][ T5867] usb 3-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=85.52 [ 272.582784][T13741] o2cb: This node has not been configured. [ 272.598813][T13741] o2cb: Cluster check failed. Fix errors before retrying. [ 272.600462][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.606535][T13741] (syz.1.3424,13741,1):user_dlm_register:674 ERROR: status = -22 [ 272.620574][ T5867] usb 3-1: Product: syz [ 272.622567][T13741] (syz.1.3424,13741,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 272.626478][ T5867] usb 3-1: Manufacturer: syz [ 272.626498][ T5867] usb 3-1: SerialNumber: syz [ 272.629452][ T5867] usb 3-1: config 0 descriptor?? [ 272.672323][ T5852] usb 1-1: USB disconnect, device number 33 [ 272.736427][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 272.736443][ T29] audit: type=1400 audit(1737369554.045:1274): avc: denied { append } for pid=13742 comm="syz.1.3425" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 272.769558][T13743] rtc_cmos 00:00: Alarms can be up to one day in the future [ 272.781836][T13742] rtc_cmos 00:00: Alarms can be up to one day in the future [ 272.913805][ T5867] usb 3-1: USB disconnect, device number 31 [ 273.616626][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.636135][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.672487][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.679989][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.748678][ T29] audit: type=1400 audit(1737369555.030:1275): avc: denied { read write } for pid=13782 comm="syz.0.3445" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.772263][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.778601][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 273.798791][T13784] smc: net device bond0 applied user defined pnetid SYZ0 [ 273.848458][ T29] audit: type=1400 audit(1737369555.030:1276): avc: denied { open } for pid=13782 comm="syz.0.3445" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.926800][ T5867] hid-generic 0005:0B57:0008.0028: item fetching failed at offset 0/4 [ 273.936125][ T5867] hid-generic 0005:0B57:0008.0028: probe with driver hid-generic failed with error -22 [ 274.362319][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 274.431710][T13824] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3462'. [ 274.492747][T13826] netlink: 18 bytes leftover after parsing attributes in process `syz.4.3463'. [ 274.512212][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 274.532163][ T5867] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 274.541262][ T5867] usb 2-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 274.566355][ T5867] usb 2-1: Product: syz [ 274.570547][ T5867] usb 2-1: Manufacturer: syz [ 274.577225][ T5867] usb 2-1: SerialNumber: syz [ 274.584363][ T5867] usb 2-1: config 0 descriptor?? [ 274.591053][ T5867] ch341 2-1:0.0: ch341-uart converter detected [ 274.672329][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 274.678948][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 274.691172][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.701859][ T9] usb 6-1: config 0 descriptor?? [ 275.046015][ T2144] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 275.111631][ T29] audit: type=1400 audit(1737369556.410:1277): avc: denied { append } for pid=13839 comm="syz.0.3470" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 275.118141][T13840] usb usb1: usbfs: process 13840 (syz.0.3470) did not claim interface 0 before use [ 275.155594][ T29] audit: type=1400 audit(1737369556.460:1278): avc: denied { read } for pid=13839 comm="syz.0.3470" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 275.179905][ T29] audit: type=1400 audit(1737369556.460:1279): avc: denied { open } for pid=13839 comm="syz.0.3470" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 275.232172][ T2144] usb 5-1: Using ep0 maxpacket: 8 [ 275.247226][ T2144] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 275.260550][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.278593][ T2144] usb 5-1: Product: syz [ 275.285826][ T2144] usb 5-1: Manufacturer: syz [ 275.290459][ T2144] usb 5-1: SerialNumber: syz [ 275.305268][ T2144] usb 5-1: config 0 descriptor?? [ 275.320203][ T2144] gspca_main: se401-2.14.0 probing 047d:5003 [ 275.342250][ T5852] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 275.406273][ T5867] usb 2-1: failed to send control message: -71 [ 275.419118][ T5867] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 275.444787][ T5867] usb 2-1: USB disconnect, device number 33 [ 275.458457][ T5867] ch341 2-1:0.0: device disconnected [ 275.498084][ T5852] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 275.528059][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.541590][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.559665][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 275.565073][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 275.571029][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 275.597610][ T5852] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 275.618193][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 275.622206][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.630839][ T9] usb 6-1: USB disconnect, device number 6 [ 275.647487][ T5852] usb 3-1: config 0 descriptor?? [ 275.944809][ T2144] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 275.973425][ T2144] usb 5-1: USB disconnect, device number 39 [ 276.036222][ T29] audit: type=1400 audit(1737369557.330:1280): avc: denied { map } for pid=13868 comm="syz.0.3480" path="socket:[43284]" dev="sockfs" ino=43284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.059607][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.064019][ T5852] hid (null): invalid report_size 1476773888 [ 276.104766][ T5852] nintendo 0003:057E:2009.0029: invalid report_size 1476773888 [ 276.126649][T13874] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3483'. [ 276.128241][ T5852] nintendo 0003:057E:2009.0029: item 0 4 1 7 parsing failed [ 276.178143][ T5852] nintendo 0003:057E:2009.0029: HID parse failed [ 276.197552][ T5852] nintendo 0003:057E:2009.0029: probe - fail = -22 [ 276.219436][ T5852] nintendo 0003:057E:2009.0029: probe with driver nintendo failed with error -22 [ 276.271855][ T5852] usb 3-1: USB disconnect, device number 32 [ 276.496361][T13892] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 276.871380][T13907] vlan2: entered promiscuous mode [ 276.881155][T13907] syz_tun: entered promiscuous mode [ 276.902723][T13907] vlan2: entered allmulticast mode [ 276.914710][T13907] syz_tun: entered allmulticast mode [ 276.931840][T13907] team0: Device vlan2 is up. Set it down before adding it as a team port [ 276.969224][T13907] syz_tun: left allmulticast mode [ 276.980587][T13907] syz_tun: left promiscuous mode [ 277.600192][ T29] audit: type=1400 audit(1737369558.900:1281): avc: denied { append } for pid=13938 comm="syz.0.3511" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 277.623194][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.249221][T13958] netlink: 'syz.1.3518': attribute type 11 has an invalid length. [ 278.382287][ T2144] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 278.563615][ T2144] usb 5-1: Using ep0 maxpacket: 16 [ 278.573355][ T2144] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 278.581556][ T2144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.598682][ T2144] usb 5-1: config 0 has no interface number 0 [ 278.606344][ T2144] usb 5-1: config 0 interface 101 has no altsetting 0 [ 278.624597][ T2144] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 278.635285][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.643839][ T2144] usb 5-1: Product: syz [ 278.648348][ T2144] usb 5-1: Manufacturer: syz [ 278.653008][ T2144] usb 5-1: SerialNumber: syz [ 278.659908][ T2144] usb 5-1: config 0 descriptor?? [ 278.676071][T13970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.901602][ T2144] usb 5-1: USB disconnect, device number 40 [ 279.629487][T14012] bridge_slave_0: default FDB implementation only supports local addresses [ 279.759376][T14016] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3544'. [ 279.952441][ T29] audit: type=1400 audit(1737369561.250:1282): avc: denied { ioctl } for pid=14030 comm="syz.0.3550" path="socket:[44414]" dev="sockfs" ino=44414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.977982][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.150956][ T29] audit: type=1400 audit(1737369561.430:1283): avc: denied { connect } for pid=14040 comm="syz.2.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.173069][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.402267][ T29] audit: type=1400 audit(1737369561.700:1284): avc: denied { connect } for pid=14054 comm="syz.2.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.421913][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.455877][T14057] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.482212][ T29] audit: type=1400 audit(1737369561.700:1285): avc: denied { write } for pid=14054 comm="syz.2.3561" laddr=172.20.20.170 lport=5 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.785124][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3568'. [ 280.811344][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 280.972345][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 280.985811][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.010434][ T8] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 281.029884][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.062242][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 281.072874][ T8] usb 3-1: config 0 descriptor?? [ 281.105524][ T8] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 281.245985][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.285793][ T25] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=fd.42 [ 281.307224][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.319494][ T8] usb 3-1: USB disconnect, device number 33 [ 281.339736][ T25] usb 2-1: Product: syz [ 281.357635][ T25] usb 2-1: Manufacturer: syz [ 281.382655][ T25] usb 2-1: SerialNumber: syz [ 281.404363][ T25] usb 2-1: config 0 descriptor?? [ 281.656418][ T25] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version fd.42 found at bus 002 address 034 [ 281.889909][ T5852] usb 2-1: USB disconnect, device number 34 [ 282.179080][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 282.212173][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 282.226140][ T29] audit: type=1400 audit(1737369563.530:1286): avc: denied { getopt } for pid=14128 comm="syz.5.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.362220][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 282.370490][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 282.379983][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 282.402447][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 282.411489][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.428699][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.452496][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.512911][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 282.536482][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.558422][ T8] usb 3-1: config 0 descriptor?? [ 282.803786][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 283.047008][T14159] serio: Serial port ptm0 [ 283.063301][ T5867] usb 3-1: USB disconnect, device number 34 [ 283.071983][ T5867] usblp0: removed [ 283.232196][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 283.384846][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 283.413129][ T8] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 283.435030][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.446478][ T8] usb 1-1: Product: syz [ 283.450674][ T8] usb 1-1: Manufacturer: syz [ 283.457738][ T8] usb 1-1: SerialNumber: syz [ 283.464331][ T8] usb 1-1: config 0 descriptor?? [ 283.623628][T14174] trusted_key: encrypted_key: keyword 'updat' not recognized [ 283.687183][ T8] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 283.702240][ T8] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 283.949088][ T8] usb 1-1: USB disconnect, device number 34 [ 283.963907][ T5852] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 284.012634][T14189] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3614'. [ 284.132188][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 284.138990][ T5852] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.150617][ T5852] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.170719][ T5852] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.184077][ T5852] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.220708][ T5852] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.240605][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.326431][T14204] can0: slcan on ttyS3. [ 284.395340][T14204] can0 (unregistered): slcan off ttyS3. [ 284.401118][T14204] Falling back ldisc for ttyS3. [ 284.432891][ T29] audit: type=1400 audit(1737369565.740:1287): avc: denied { read } for pid=14207 comm="syz.1.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 284.471907][ T5852] usb 3-1: GET_CAPABILITIES returned 0 [ 284.479870][ T5852] usbtmc 3-1:16.0: can't read capabilities [ 284.522533][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 284.682864][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 284.684704][ T25] usb 3-1: USB disconnect, device number 35 [ 284.689866][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.711029][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.723529][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.754449][ T5852] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 284.758764][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.776133][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.809877][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.830209][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.838743][ T9] usb 6-1: Manufacturer: syz [ 284.852826][ T9] usb 6-1: config 0 descriptor?? [ 284.925521][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 284.935815][ T5852] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 284.947307][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.962311][ T5852] usb 5-1: config 0 descriptor?? [ 285.050820][T14233] input: syz0 as /devices/virtual/input/input47 [ 285.134330][ T9] rc_core: IR keymap rc-hauppauge not found [ 285.152188][ T9] Registered IR keymap rc-empty [ 285.157170][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.182825][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.204237][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 285.210102][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 285.231751][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 285.248386][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.275090][ T29] audit: type=1400 audit(1737369566.580:1288): avc: denied { write } for pid=14240 comm="syz.2.3638" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 285.300795][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.330183][T14241] binder: 14240:14241 ioctl c00c620f 200001c0 returned -22 [ 285.337969][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.362247][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.372388][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 285.385817][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 285.392258][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.408931][ T25] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 285.427233][ T5852] lenovo 0003:17EF:6047.002A: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 285.432441][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.439424][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.452850][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3639'. [ 285.463360][ T25] usb 1-1: Product: syz [ 285.467630][ T25] usb 1-1: Manufacturer: syz [ 285.478949][ T25] usb 1-1: SerialNumber: syz [ 285.482305][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.500123][ T25] usb 1-1: config 0 descriptor?? [ 285.508745][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 285.512447][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.523492][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 285.535239][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input49 [ 285.549367][ T25] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 285.552531][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.589152][ T25] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 285.602420][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 285.643637][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 285.653046][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 285.664703][ T9] usb 6-1: USB disconnect, device number 7 [ 285.813938][ T5852] lenovo 0003:17EF:6047.002A: Failed to switch middle button: -71 [ 285.825250][ T5852] lenovo 0003:17EF:6047.002A: Fn-lock setting failed: -71 [ 285.833697][ T5852] lenovo 0003:17EF:6047.002A: Sensitivity setting failed: -71 [ 285.843276][ T5852] usb 5-1: USB disconnect, device number 41 [ 285.872280][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 285.884144][ T5867] usb 1-1: USB disconnect, device number 35 [ 286.032131][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 286.038900][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.047573][ T8] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 286.055873][ T8] usb 3-1: config 8 has no interface number 0 [ 286.062179][ T8] usb 3-1: config 8 interface 255 has no altsetting 0 [ 286.074880][ T8] usb 3-1: string descriptor 0 read error: -22 [ 286.081304][ T8] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 286.090827][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.374409][T14254] vxcan3: entered allmulticast mode [ 286.530978][ T8] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 286.560462][ T8] usb 3-1: USB disconnect, device number 36 [ 286.732761][T14269] serio: Serial port ptm0 [ 286.931705][ T29] audit: type=1400 audit(1737369568.230:1289): avc: denied { bind } for pid=14277 comm="syz.4.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 286.975318][ T29] audit: type=1400 audit(1737369568.260:1290): avc: denied { name_bind } for pid=14277 comm="syz.4.3655" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 286.999215][ T29] audit: type=1400 audit(1737369568.260:1291): avc: denied { node_bind } for pid=14277 comm="syz.4.3655" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 287.047721][ T29] audit: type=1400 audit(1737369568.270:1292): avc: denied { setopt } for pid=14277 comm="syz.4.3655" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 287.107008][ T29] audit: type=1400 audit(1737369568.410:1293): avc: denied { bind } for pid=14283 comm="syz.2.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 287.388857][T14299] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 287.439749][ T29] audit: type=1400 audit(1737369568.740:1294): avc: denied { mount } for pid=14298 comm="syz.0.3664" name="/" dev="rpc_pipefs" ino=45021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 287.672439][T14310] ip6gretap0: entered promiscuous mode [ 287.682286][ T5867] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 287.842461][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 287.848949][ T5867] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 287.868962][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.884767][ T5867] usb 3-1: config 0 descriptor?? [ 288.052404][ T5852] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 288.264658][ T5852] usb 6-1: config 144 has an invalid descriptor of length 0, skipping remainder of the config [ 288.277031][ T5852] usb 6-1: config 144 has 0 interfaces, different from the descriptor's value: 1 [ 288.299382][ T5852] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.309548][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.316755][ T5867] saitek 0003:06A3:0CCD.002B: unknown main item tag 0x0 [ 288.332340][ T5852] usb 6-1: Product: syz [ 288.336534][ T5852] usb 6-1: Manufacturer: syz [ 288.341337][ T5852] usb 6-1: SerialNumber: syz [ 288.365461][ T5867] saitek 0003:06A3:0CCD.002B: unknown main item tag 0x0 [ 288.379550][ T5867] saitek 0003:06A3:0CCD.002B: item fetching failed at offset 3/5 [ 288.390663][ T5867] saitek 0003:06A3:0CCD.002B: parse failed [ 288.401028][ T5867] saitek 0003:06A3:0CCD.002B: probe with driver saitek failed with error -22 [ 288.567898][ T9] usb 3-1: USB disconnect, device number 37 [ 288.627851][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3678'. [ 288.758413][T14336] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 288.782444][T14336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.817354][ T5852] usb 6-1: USB disconnect, device number 8 [ 289.131241][T14358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3687'. [ 289.151334][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 289.543829][ T2144] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 289.681263][T14374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.706782][ T29] audit: type=1326 audit(1737369571.010:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0920385d29 code=0x7ffc0000 [ 289.739274][ T29] audit: type=1326 audit(1737369571.010:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14345 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0920385d29 code=0x7ffc0000 [ 289.762539][ T2144] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 289.771850][ T2144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.804409][ T2144] usb 3-1: config 0 descriptor?? [ 289.813458][ T2144] cp210x 3-1:0.0: cp210x converter detected [ 289.840214][ T29] audit: type=1400 audit(1737369571.140:1297): avc: denied { read } for pid=14375 comm="syz.5.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.224634][ T2144] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 290.250365][ T2144] usb 3-1: cp210x converter now attached to ttyUSB0 [ 290.362786][T14404] netlink: 'syz.5.3709': attribute type 10 has an invalid length. [ 290.388069][T14404] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 290.410637][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.464636][ T2144] usb 3-1: USB disconnect, device number 38 [ 290.474872][ T2144] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 290.487422][ T2144] cp210x 3-1:0.0: device disconnected [ 290.569952][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 290.569967][ T29] audit: type=1400 audit(1737369571.870:1299): avc: denied { write } for pid=14410 comm="syz.4.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.537703][T14443] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 291.653754][ T2144] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 291.723724][ T29] audit: type=1400 audit(1737369573.010:1300): avc: denied { read write } for pid=14447 comm="syz.4.3728" name="cgroup.subtree_control" dev="cgroup2" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.785324][ T29] audit: type=1400 audit(1737369573.010:1301): avc: denied { open } for pid=14447 comm="syz.4.3728" path="" dev="cgroup2" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 291.843703][ T2144] usb 2-1: Using ep0 maxpacket: 8 [ 291.858463][ T2144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.882068][ T29] audit: type=1400 audit(1737369573.180:1302): avc: denied { unmount } for pid=11798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 291.903945][ T2144] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 291.913090][ T2144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.935262][ T2144] usb 2-1: config 0 descriptor?? [ 292.092286][ T5867] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 292.254279][ T2144] usbhid 2-1:0.0: can't add hid device: -71 [ 292.260299][ T2144] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 292.262144][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 292.272112][ T2144] usb 2-1: USB disconnect, device number 35 [ 292.294594][ T5867] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 292.312252][ T5867] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 292.323572][ T5867] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 292.334858][ T5867] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 292.361774][ T5867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.393334][ T5867] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 292.418926][ T5867] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 292.437985][ T5867] usb 5-1: Product: syz [ 292.442429][ T5867] usb 5-1: Manufacturer: syz [ 292.447246][ T5867] usb 5-1: SerialNumber: syz [ 292.454665][ T5867] usb 5-1: config 0 descriptor?? [ 292.459794][T14461] tipc: Enabling of bearer rejected, failed to enable media [ 292.471419][ T5867] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 292.481862][ T5867] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 292.723122][ T8] usb 5-1: USB disconnect, device number 42 [ 292.730868][ T8] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 294.891424][ T29] audit: type=1400 audit(1737369576.190:1303): avc: denied { read } for pid=14532 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 294.953646][ T29] audit: type=1400 audit(1737369576.250:1304): avc: denied { setopt } for pid=14532 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 295.658551][ T29] audit: type=1400 audit(1737369576.960:1305): avc: denied { create } for pid=14553 comm="syz.5.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.684569][T14554] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 295.720368][ T29] audit: type=1400 audit(1737369576.990:1306): avc: denied { write } for pid=14553 comm="syz.5.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 295.902314][ T5867] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 296.024068][T14577] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.077551][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 296.095393][ T5867] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 296.104682][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 296.117469][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.137048][ T5867] usb 3-1: config 0 descriptor?? [ 296.145443][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 296.284407][ T8] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 296.312346][ T8] usb 2-1: config 0 has no interface number 0 [ 296.332197][ T8] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.368385][ T8] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.387402][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 296.401737][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.438043][ T8] usb 2-1: config 0 descriptor?? [ 296.819744][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3794'. [ 296.878942][ T8] uclogic 0003:28BD:0905.002C: Interface probing failed: -22 [ 296.913197][ T8] uclogic 0003:28BD:0905.002C: interface is invalid, ignoring [ 296.980754][ T5867] gspca_nw80x: reg_r err -71 [ 296.995922][ T5867] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 297.015261][ T5867] usb 3-1: USB disconnect, device number 39 [ 297.185305][ T2144] usb 2-1: USB disconnect, device number 36 [ 298.308793][T14640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.319319][ T29] audit: type=1400 audit(1737369579.630:1307): avc: denied { map } for pid=14641 comm="syz.2.3814" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.349508][T14640] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 298.524663][ T29] audit: type=1400 audit(1737369579.830:1308): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 298.676504][T14655] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 298.713559][T14655] pim6reg0: owner set to 1 [ 299.033267][ T29] audit: type=1326 audit(1737369580.340:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14679 comm="syz.1.3827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639b585d29 code=0x0 [ 299.056326][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.116820][ T29] audit: type=1400 audit(1737369580.420:1310): avc: denied { connect } for pid=14686 comm="syz.4.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.184048][ T29] audit: type=1400 audit(1737369580.490:1311): avc: denied { write } for pid=14686 comm="syz.4.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.496252][T14704] netlink: 'syz.5.3838': attribute type 21 has an invalid length. [ 299.552610][ T5863] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 299.650770][ T29] audit: type=1326 audit(1737369580.950:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14709 comm="syz.0.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 299.674304][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.692603][ T29] audit: type=1326 audit(1737369580.950:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14709 comm="syz.0.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 299.725223][ T29] audit: type=1326 audit(1737369580.950:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14709 comm="syz.0.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 299.749474][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 299.758077][ T5863] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 299.768623][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.782955][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.794067][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.802243][ T5863] usb 3-1: SerialNumber: syz [ 299.809517][T14683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 299.822192][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 299.930505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.992233][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 300.008489][ T8] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 300.018267][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.032679][ T8] usb 6-1: config 0 descriptor?? [ 300.051809][ T5863] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 300.063750][ T5863] usb 3-1: USB disconnect, device number 40 [ 300.456482][ T8] wacom 0003:056A:0000.002D: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 300.483248][ T8] wacom 0003:056A:0000.002D: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 300.495776][ T8] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.002D/input/input50 [ 300.662658][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3851'. [ 300.708607][ T5863] usb 6-1: USB disconnect, device number 9 [ 300.768196][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 300.768209][ T29] audit: type=1400 audit(1737369582.070:1326): avc: denied { write } for pid=14735 comm="syz.4.3853" path="socket:[47081]" dev="sockfs" ino=47081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.144288][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3863'. [ 301.167724][T14757] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.180220][T14757] team0: Port device batadv1 added [ 301.467341][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 301.546941][T14773] bond3 (unregistering): Released all slaves [ 301.589832][ T5128] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 301.720483][T14788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.728155][T14790] usb usb1: usbfs: process 14790 (syz.5.3873) did not claim interface 0 before use [ 301.903297][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'. [ 302.570027][T14832] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3893'. [ 302.782286][ T5863] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 302.956613][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 302.983681][ T5863] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 303.012242][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.032677][ T5863] usb 1-1: config 0 descriptor?? [ 303.465808][ T5863] saitek 0003:06A3:0CCD.002E: unknown main item tag 0x0 [ 303.484171][ T2144] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 303.487864][ T5863] saitek 0003:06A3:0CCD.002E: unknown main item tag 0x0 [ 303.531931][ T5863] saitek 0003:06A3:0CCD.002E: item fetching failed at offset 3/5 [ 303.553546][ T5863] saitek 0003:06A3:0CCD.002E: parse failed [ 303.559457][ T5863] saitek 0003:06A3:0CCD.002E: probe with driver saitek failed with error -22 [ 303.624163][T14865] bridge0: port 3(vlan0) entered blocking state [ 303.638476][T14865] bridge0: port 3(vlan0) entered disabled state [ 303.647696][T14865] vlan0: entered allmulticast mode [ 303.659811][T14865] vlan0: left allmulticast mode [ 303.670183][ T2144] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 303.689967][ T2144] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.741648][ T2144] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid maxpacket 7772, setting to 64 [ 303.767689][ T5852] usb 1-1: USB disconnect, device number 36 [ 303.792260][ T2144] usb 2-1: config 0 interface 0 has no altsetting 0 [ 303.809208][ T2144] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 303.827171][ T2144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.857920][ T2144] usb 2-1: config 0 descriptor?? [ 304.135928][ T5852] usb 2-1: USB disconnect, device number 37 [ 304.137731][ T5128] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 304.355897][ T29] audit: type=1400 audit(1737369585.650:1327): avc: denied { read } for pid=14890 comm="syz.2.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.592105][ T29] audit: type=1400 audit(1737369585.890:1328): avc: denied { search } for pid=14905 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.626842][ T29] audit: type=1400 audit(1737369585.930:1329): avc: denied { read } for pid=14908 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.706160][ T29] audit: type=1400 audit(1737369585.930:1330): avc: denied { open } for pid=14908 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.744563][ T5867] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 304.758793][ T29] audit: type=1400 audit(1737369585.930:1331): avc: denied { getattr } for pid=14908 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.793726][ T29] audit: type=1400 audit(1737369585.930:1332): avc: denied { getattr } for pid=14908 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.830894][ T29] audit: type=1326 audit(1737369586.060:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14906 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 304.864872][ T29] audit: type=1326 audit(1737369586.060:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14906 comm="syz.0.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 304.902502][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 304.916953][ T5867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.938862][ T29] audit: type=1400 audit(1737369586.070:1335): avc: denied { read } for pid=14910 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.962410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.981809][ T5867] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 305.009553][ T5867] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 51720, setting to 1024 [ 305.031773][ T5867] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 305.076258][ T5867] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 305.091836][ T5867] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.101270][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.109778][ T5867] usb 6-1: SerialNumber: syz [ 305.145311][T14902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 305.165365][T14902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 305.182978][ T5867] hub 6-1:1.0: bad descriptor, ignoring hub [ 305.208695][ T5867] hub 6-1:1.0: probe with driver hub failed with error -5 [ 305.395580][T14902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 305.419797][T14902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 305.508554][T14936] use of bytesused == 0 is deprecated and will be removed in the future, [ 305.552186][T14936] use the actual size instead. [ 305.582615][T14942] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3936'. [ 305.592162][ T5852] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 305.779150][ T5852] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.805710][ T5852] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.840523][ T5867] cdc_ether 6-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 305.869925][ T5852] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.885175][ T5852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 305.905595][ T5852] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 305.918306][ T5852] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.943477][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.971834][ T5852] usb 5-1: Product: syz [ 305.992110][ T5852] usb 5-1: Manufacturer: syz [ 306.000112][ T5852] cdc_wdm 5-1:1.0: skipping garbage [ 306.002643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.015665][ T5852] cdc_wdm 5-1:1.0: skipping garbage [ 306.054917][ T5852] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 306.071074][ T5852] cdc_wdm 5-1:1.0: Unknown control protocol [ 306.135952][T14970] kernel read not supported for file /blkio.bfq.group_wait_time (pid: 14970 comm: syz.1.3943) [ 306.151216][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 306.151233][ T29] audit: type=1800 audit(1737369587.450:1347): pid=14970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3943" name="blkio.bfq.group_wait_time" dev="mqueue" ino=47544 res=0 errno=0 [ 306.152676][ T5867] usb 6-1: USB disconnect, device number 10 [ 306.213559][ T5852] usb 5-1: USB disconnect, device number 43 [ 306.223891][ T5867] cdc_ether 6-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 306.322350][ T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 306.382827][ T29] audit: type=1400 audit(1737369587.680:1348): avc: denied { view } for pid=14981 comm="syz.1.3946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 306.472248][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 306.483867][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.502841][ T8] usb 1-1: config 0 has no interface number 0 [ 306.517264][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.536723][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.552088][ T8] usb 1-1: Product: syz [ 306.572119][ T8] usb 1-1: Manufacturer: syz [ 306.576752][ T8] usb 1-1: SerialNumber: syz [ 306.602619][ T8] usb 1-1: config 0 descriptor?? [ 306.634246][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 306.687670][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3950'. [ 306.698863][T14997] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3950'. [ 306.733253][T14997] vlan2: entered allmulticast mode [ 306.874545][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 306.907781][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 307.033525][ T29] audit: type=1400 audit(1737369588.340:1349): avc: denied { getopt } for pid=15012 comm="syz.5.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.052993][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.059436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.343385][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 307.357539][ T5867] usb 1-1: USB disconnect, device number 37 [ 307.367967][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 307.406294][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 307.432511][ T5867] quatech2 1-1:0.51: device disconnected [ 307.540767][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 307.692144][ T8] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 307.823474][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 307.852380][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 307.859160][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 307.872285][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.882321][ T8] usb 5-1: config 0 descriptor?? [ 307.895542][T15059] bond1 (unregistering): Released all slaves [ 308.305505][ T5128] Bluetooth: Wrong link type (-71) [ 308.314815][ T8] wacom 0003:056A:0000.002F: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 308.335515][ T8] wacom 0003:056A:0000.002F: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 308.348139][ T8] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.002F/input/input53 [ 308.690022][ T8] usb 5-1: USB disconnect, device number 44 [ 308.933917][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 308.987054][T15108] bond1 (unregistering): Released all slaves [ 309.633155][ T5852] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 309.764120][ T29] audit: type=1400 audit(1737369591.070:1350): avc: denied { ioctl } for pid=15142 comm="syz.4.3994" path="socket:[48937]" dev="sockfs" ino=48937 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 309.788914][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.873124][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.888013][ T5852] usb 2-1: string descriptor 0 read error: -22 [ 309.895833][ T5852] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=ad.c0 [ 309.926993][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.985594][ T5852] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 310.179974][ T5852] dvb-usb: bulk message failed: -22 (1/0) [ 310.199216][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.239403][ T5852] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 310.259084][ T5852] usb 2-1: media controller created [ 310.328352][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.489487][ T5852] DVB: Unable to find symbol lgdt330x_attach() [ 310.499484][ T29] audit: type=1400 audit(1737369591.800:1351): avc: denied { getopt } for pid=15177 comm="syz.0.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 310.512069][ T5852] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 310.601184][ T5852] dvb-usb: bulk message failed: -22 (1/0) [ 310.621890][ T5852] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 310.672627][ T5852] usb 2-1: USB disconnect, device number 38 [ 310.746298][ T5852] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 310.999035][ T29] audit: type=1400 audit(1737369592.300:1352): avc: denied { mount } for pid=15205 comm="syz.0.4010" name="/" dev="configfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 311.021874][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.089015][ T29] audit: type=1400 audit(1737369592.350:1353): avc: denied { search } for pid=15205 comm="syz.0.4010" name="/" dev="configfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.186128][ T29] audit: type=1400 audit(1737369592.380:1354): avc: denied { write } for pid=15205 comm="syz.0.4010" name="/" dev="configfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.270410][ T29] audit: type=1400 audit(1737369592.380:1355): avc: denied { add_name } for pid=15205 comm="syz.0.4010" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 311.270609][ T29] audit: type=1400 audit(1737369592.380:1356): avc: denied { create } for pid=15205 comm="syz.0.4010" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 311.361785][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.453529][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.528736][ T29] audit: type=1400 audit(1737369592.540:1357): avc: denied { unmount } for pid=11798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 311.868436][T15243] 9pnet_rdma: rdma_create_trans (15243): problem binding to privport: 13 [ 312.085385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.269211][ T46] hid-generic 0000:0003:0000.0030: unknown main item tag 0x0 [ 312.279524][ T46] hid-generic 0000:0003:0000.0030: unknown main item tag 0x0 [ 312.315124][ T46] hid-generic 0000:0003:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 312.412478][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 312.580549][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 312.591903][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.610421][ T9] usb 5-1: config 0 has no interface number 0 [ 312.631687][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 312.662262][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.670344][ T9] usb 5-1: Product: syz [ 312.681692][ T9] usb 5-1: Manufacturer: syz [ 312.686554][ T9] usb 5-1: SerialNumber: syz [ 312.693171][ T9] usb 5-1: config 0 descriptor?? [ 312.704546][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 312.734658][ T9] usb 5-1: selecting invalid altsetting 1 [ 312.740455][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 312.758487][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 312.789473][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 312.809583][ T9] usb 5-1: media controller created [ 312.863420][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.922174][ T29] audit: type=1400 audit(1737369594.220:1358): avc: denied { read } for pid=15279 comm="syz.0.4040" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.993827][ T29] audit: type=1400 audit(1737369594.220:1359): avc: denied { open } for pid=15279 comm="syz.0.4040" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 313.068312][ T29] audit: type=1400 audit(1737369594.230:1360): avc: denied { ioctl } for pid=15279 comm="syz.0.4040" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 313.123720][ T5852] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 313.169824][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 313.185140][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 313.199076][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 313.252321][ T9] usb 5-1: USB disconnect, device number 45 [ 313.299412][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 313.317993][ T5852] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 313.337354][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.359282][ T5852] usb 2-1: config 0 descriptor?? [ 313.722262][ T5867] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 313.790126][ T5852] wacom 0003:056A:0000.0031: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 313.814710][ T5852] wacom 0003:056A:0000.0031: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 313.833171][ T5852] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.0031/input/input56 [ 313.892165][ T5867] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 313.924945][ T5867] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 313.956717][ T5867] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 313.976438][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.017151][ T5867] usb 1-1: Product: syz [ 314.036233][ T5867] usb 1-1: Manufacturer: syz [ 314.055389][ T5867] usb 1-1: SerialNumber: syz [ 314.071995][ T5867] usb 1-1: config 0 descriptor?? [ 314.110830][ T9] usb 2-1: USB disconnect, device number 39 [ 314.329000][ T5867] mos7840 1-1:0.0: required endpoints missing [ 314.349350][ T5867] usb 1-1: USB disconnect, device number 38 [ 314.702220][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 314.764027][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4057'. [ 314.811394][T15321] bond1 (unregistering): Released all slaves [ 314.862631][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 314.873831][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.916775][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.942141][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 314.966494][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.004729][ T9] usb 5-1: config 0 descriptor?? [ 315.088820][ T29] audit: type=1326 audit(1737369596.390:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 315.169071][ T29] audit: type=1326 audit(1737369596.420:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 315.239368][ T29] audit: type=1326 audit(1737369596.420:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd70385d29 code=0x7ffc0000 [ 315.404328][T15351] overlayfs: missing 'lowerdir' [ 315.441734][ T9] corsair 0003:1B1C:1B02.0032: unknown main item tag 0x0 [ 315.450537][ T9] corsair 0003:1B1C:1B02.0032: unknown main item tag 0x0 [ 315.452250][ T5852] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 315.469542][ T9] corsair 0003:1B1C:1B02.0032: item fetching failed at offset 2/5 [ 315.490216][ T9] corsair 0003:1B1C:1B02.0032: parse failed [ 315.502250][ T9] corsair 0003:1B1C:1B02.0032: probe with driver corsair failed with error -22 [ 315.665489][ T5852] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 315.690082][ T2144] usb 5-1: USB disconnect, device number 46 [ 315.709043][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.729002][ T5852] usb 2-1: config 0 has no interface number 0 [ 315.736061][ T5852] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 315.755681][ T5852] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.797895][ T5852] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 315.807759][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.820137][ T5852] usb 2-1: Product: syz [ 315.825023][ T5852] usb 2-1: Manufacturer: syz [ 315.829953][ T5852] usb 2-1: SerialNumber: syz [ 315.836516][ T5852] usb 2-1: config 0 descriptor?? [ 316.239244][T15386] netlink: 'syz.0.4088': attribute type 2 has an invalid length. [ 316.262803][T15386] netlink: 85376 bytes leftover after parsing attributes in process `syz.0.4088'. [ 316.267145][T15388] team0: Device ipvlan2 failed to register rx_handler [ 316.283709][ T2144] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 316.462057][ T2144] usb 3-1: Using ep0 maxpacket: 8 [ 316.473868][ T2144] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 316.482485][ T2144] usb 3-1: config 179 has no interface number 0 [ 316.488776][ T2144] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 316.533617][ T2144] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 316.538624][ T5867] usb 2-1: USB disconnect, device number 40 [ 316.561084][ T2144] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 316.600304][ T2144] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 316.628461][ T2144] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 316.656475][ T2144] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 316.680665][ T2144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.703103][T15377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.759089][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 316.759106][ T29] audit: type=1400 audit(1737369598.060:1369): avc: denied { listen } for pid=15401 comm="syz.0.4096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 317.045621][ T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input60 [ 317.122345][ T29] audit: type=1400 audit(1737369598.420:1370): avc: denied { execute } for pid=15413 comm="syz.0.4101" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 317.217190][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223692][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.294361][ T8] usb 3-1: USB disconnect, device number 41 [ 317.294365][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 317.294404][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 317.316952][ T8] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 317.327121][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.524188][ T5867] hid-generic 0000:0003:0000.0033: unknown main item tag 0x0 [ 317.526635][T15424] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 317.541823][ T5867] hid-generic 0000:0003:0000.0033: unknown main item tag 0x0 [ 317.562281][ T5867] hid-generic 0000:0003:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.220766][ T29] audit: type=1400 audit(1737369599.520:1371): avc: denied { setopt } for pid=15452 comm="syz.2.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 318.430219][T15465] IPVS: Unknown mcast interface: vcan0 [ 318.556908][T15470] xt_ecn: cannot match TCP bits for non-tcp packets [ 318.592241][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 318.685116][T15477] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4128'. [ 318.710288][T15478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4129'. [ 318.773755][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 318.790391][ T25] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.814161][ T25] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.825260][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 318.833528][ T25] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 318.844149][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.854848][ T25] usb 3-1: config 0 descriptor?? [ 318.869795][T15486] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 319.007263][T15492] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4135'. [ 319.281846][ T25] hid-steam 0003:28DE:1205.0034: unknown main item tag 0x0 [ 319.304615][ T25] hid-steam 0003:28DE:1205.0034: unknown main item tag 0x0 [ 319.310941][T15505] Invalid ELF header len 8 [ 319.315146][ T29] audit: type=1400 audit(1737369600.610:1372): avc: denied { module_load } for pid=15504 comm="syz.4.4141" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=49639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 319.348607][ T25] hid-steam 0003:28DE:1205.0034: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 319.422542][ T25] hid-steam 0003:28DE:1205.0034: Steam Controller 'XXXXXXXXXX' connected [ 319.455851][ T25] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0034/input/input61 [ 319.485386][ T29] audit: type=1400 audit(1737369600.800:1373): avc: denied { read } for pid=5174 comm="acpid" name="event4" dev="devtmpfs" ino=3308 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.507200][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.531488][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0034/input/input62 [ 319.561192][ T29] audit: type=1400 audit(1737369600.800:1374): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3308 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.598080][ T25] hid-steam 0003:28DE:1205.0035: unknown main item tag 0x0 [ 319.623717][ T29] audit: type=1400 audit(1737369600.800:1375): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3308 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 319.634913][ T25] hid-steam 0003:28DE:1205.0035: unknown main item tag 0x0 [ 319.707209][ T25] hid-steam 0003:28DE:1205.0035: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 319.777139][ T25] usb 3-1: USB disconnect, device number 42 [ 319.827519][ T25] hid-steam 0003:28DE:1205.0034: Steam Controller 'XXXXXXXXXX' disconnected [ 319.972789][ T29] audit: type=1400 audit(1737369601.280:1376): avc: denied { execute } for pid=15520 comm="syz.1.4149" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 320.119919][T15527] input: syz0 as /devices/virtual/input/input63 [ 320.207820][T15533] Cannot find add_set index 0 as target [ 320.344233][T15543] team0: Device ipvlan2 failed to register rx_handler [ 320.499109][T15550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.581505][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 320.613585][T15550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.670325][T15556] vlan0: entered allmulticast mode [ 320.690272][T15556] erspan0: entered allmulticast mode [ 321.037852][T15582] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4177'. [ 321.708111][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'. [ 322.562229][ T29] audit: type=1400 audit(1737369603.840:1377): avc: denied { connect } for pid=15658 comm="syz.2.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 322.811721][T15676] Failed to get privilege flags for destination (handle=0x2:0x0) [ 322.833151][ T5852] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 322.922392][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 322.991128][T15680] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15680 comm=syz.2.4220 [ 323.043733][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 323.051126][ T5852] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 323.069718][ T5852] usb 2-1: config 0 has no interface number 0 [ 323.089228][ T5852] usb 2-1: config 0 interface 12 has no altsetting 0 [ 323.096298][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 323.112512][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.123895][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 323.139690][ T5852] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 323.149516][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.163648][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.175714][ T5852] usb 2-1: Product: syz [ 323.179907][ T5852] usb 2-1: Manufacturer: syz [ 323.194289][ T25] usb 1-1: config 0 descriptor?? [ 323.202528][ T5852] usb 2-1: SerialNumber: syz [ 323.220668][ T5852] usb 2-1: config 0 descriptor?? [ 323.460368][T15692] mkiss: ax0: crc mode is auto. [ 323.636739][ T25] hid (null): invalid report_count 1527182006 [ 323.651070][ T25] mcp2221 0003:04D8:00DD.0036: invalid report_count 1527182006 [ 323.670606][ T25] mcp2221 0003:04D8:00DD.0036: item 0 4 1 9 parsing failed [ 323.691322][ T25] mcp2221 0003:04D8:00DD.0036: can't parse reports [ 323.711304][ T25] mcp2221 0003:04D8:00DD.0036: probe with driver mcp2221 failed with error -22 [ 323.843910][ T8] usb 1-1: USB disconnect, device number 39 [ 323.865602][ T5852] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 323.879253][ T5852] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 323.902290][ T5852] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 323.909930][ T5852] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 323.946759][ T5852] usb 2-1: USB disconnect, device number 41 [ 324.434160][T15709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.457449][T15709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.499962][T15709] bond0 (unregistering): Released all slaves [ 324.656533][T15724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4241'. [ 325.132772][T15749] lo: entered promiscuous mode [ 325.143341][T15749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.602533][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 325.634976][ T29] audit: type=1400 audit(1737369606.940:1378): avc: denied { write } for pid=15774 comm="syz.1.4265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 325.761374][T15781] Process accounting resumed [ 325.778496][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 325.812466][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 325.820864][ T9] usb 5-1: config 0 has no interface number 0 [ 325.844366][ T9] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 325.859844][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.882130][ T9] usb 5-1: Product: syz [ 325.886365][ T9] usb 5-1: Manufacturer: syz [ 325.898295][ T9] usb 5-1: SerialNumber: syz [ 325.918729][ T9] usb 5-1: config 0 descriptor?? [ 326.169114][ T5867] usb 5-1: USB disconnect, device number 47 [ 326.229848][T15804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.263905][T15804] bond0: (slave bond1): Enslaving as an active interface with an up link [ 326.752506][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 326.851187][ T29] audit: type=1400 audit(1737369608.150:1379): avc: denied { mount } for pid=15833 comm="syz.2.4292" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 326.923619][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 326.944036][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.956245][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.971600][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.981925][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 326.994580][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.019257][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 327.028618][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.052139][ T8] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 327.062468][ T9] usb 2-1: Manufacturer: syz [ 327.073987][ T9] usb 2-1: config 0 descriptor?? [ 327.147033][ T29] audit: type=1400 audit(1737369608.450:1380): avc: denied { accept } for pid=15846 comm="syz.2.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.221380][ T8] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 327.252264][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 327.252693][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4300'. [ 327.261352][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.314801][ T8] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 327.321323][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4300'. [ 327.350770][T15851] erspan0: entered promiscuous mode [ 327.376617][ T9] rc_core: IR keymap rc-hauppauge not found [ 327.392066][ T9] Registered IR keymap rc-empty [ 327.397196][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.424039][T15851] erspan0: left promiscuous mode [ 327.432208][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.440165][T15860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4304'. [ 327.453710][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 327.473447][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64 [ 327.493836][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.502627][T15818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.511417][T15818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.562160][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.582492][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.598042][ T1200] usb 5-1: USB disconnect, device number 48 [ 327.622920][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.643144][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.672223][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.702158][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.732268][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.782557][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.804496][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 327.823091][ T9] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 327.831116][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.847250][ T9] usb 2-1: USB disconnect, device number 42 [ 327.868963][ T29] audit: type=1400 audit(1737369609.170:1381): avc: denied { remove_name } for pid=15869 comm="syz.0.4308" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.910600][ T29] audit: type=1400 audit(1737369609.200:1382): avc: denied { unlink } for pid=15869 comm="syz.0.4308" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.389333][ T29] audit: type=1400 audit(1737369609.690:1383): avc: denied { map } for pid=15889 comm="syz.0.4316" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 328.550669][T15894] x_tables: ip_tables: udp match: only valid for protocol 17 [ 328.714620][T15902] Bluetooth: hci5: Frame reassembly failed (-84) [ 328.773767][T11380] Bluetooth: hci5: Frame reassembly failed (-84) [ 329.522225][ T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 329.681308][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 329.704345][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 329.716074][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 43690, setting to 64 [ 329.727223][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.741504][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.755381][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.764176][ T9] usb 2-1: Manufacturer: syz [ 329.770509][ T9] usb 2-1: config 0 descriptor?? [ 329.782814][T15919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 329.801036][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 329.954222][T15951] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 330.028410][ T5852] usb 2-1: USB disconnect, device number 43 [ 330.111883][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 330.263632][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 330.275940][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.295952][ T25] usb 5-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 330.310116][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.327625][ T25] usb 5-1: config 0 descriptor?? [ 330.724141][ T5128] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 330.762186][ T25] ntrig 0003:1B96:000C.0037: hidraw0: USB HID v0.00 Device [HID 1b96:000c] on usb-dummy_hcd.4-1/input0 [ 330.904157][ T46] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 330.950372][ T25] ntrig 0003:1B96:000C.0037: Firmware version: 7.15.25.45.4 (7f1e bc35) [ 331.062182][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 331.069037][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 331.079789][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.093089][ T46] usb 1-1: config 0 descriptor?? [ 331.162472][T16000] netlink: 1272 bytes leftover after parsing attributes in process `syz.5.4368'. [ 331.208395][T16000] openvswitch: netlink: Key type 29 is not supported [ 331.221101][ T25] usb 5-1: USB disconnect, device number 49 [ 331.515272][ T46] wacom 0003:056A:0000.0038: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 331.527665][ T46] wacom 0003:056A:0000.0038: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 331.541591][ T46] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.0038/input/input65 [ 331.631965][ T29] audit: type=1400 audit(1737369612.930:1384): avc: denied { setopt } for pid=16013 comm="syz.1.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.651662][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.869961][ T46] usb 1-1: USB disconnect, device number 40 [ 332.039954][T16034] vivid-007: disconnect [ 332.050732][T16033] vivid-007: reconnect [ 332.233756][T16044] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4389'. [ 332.702471][ T29] audit: type=1400 audit(1737369614.000:1385): avc: denied { append } for pid=16067 comm="syz.2.4399" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 333.468245][T16096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4410'. [ 334.112673][T16131] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 334.160977][T16135] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 334.928623][T16164] tipc: Started in network mode [ 334.934649][T16164] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 334.970582][T16164] tipc: Enabled bearer , priority 0 [ 335.211960][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4450'. [ 335.232155][ T1200] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 335.402374][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 335.414877][ T1200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.440168][ T1200] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.470556][ T1200] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 335.499652][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.519745][ T1200] usb 5-1: config 0 descriptor?? [ 335.582161][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 335.589325][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.614475][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.635743][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.702492][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.715932][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.742323][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.771802][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.784763][ T9] usb 1-1: Manufacturer: syz [ 335.813249][ T9] usb 1-1: config 0 descriptor?? [ 335.938963][ T1200] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 335.949509][ T1200] cm6533_jd 0003:0D8C:0022.0039: item fetching failed at offset 4/5 [ 335.965780][ T25] tipc: Node number set to 15444650 [ 335.969008][ T1200] cm6533_jd 0003:0D8C:0022.0039: parse failed [ 335.984968][ T1200] cm6533_jd 0003:0D8C:0022.0039: probe with driver cm6533_jd failed with error -22 [ 336.071984][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4461'. [ 336.142334][ T9] rc_core: IR keymap rc-hauppauge not found [ 336.162673][ T5867] usb 5-1: USB disconnect, device number 50 [ 336.170497][ T9] Registered IR keymap rc-empty [ 336.180458][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.212302][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.251472][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 336.273582][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input68 [ 336.288866][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.312211][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.343400][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.452153][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.472193][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.492185][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.520567][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.542287][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.572162][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.592139][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.612383][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 336.640259][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.652192][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.673091][ T9] usb 1-1: USB disconnect, device number 41 [ 337.304747][T16247] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4479'. [ 337.863679][T16276] xfs: Unknown parameter 'grpquotatring [ 337.863679][T16276] statistic [ 337.863679][T16276] state [ 337.863679][T16276] realm [ 337.863679][T16276] rateest [ 337.863679][T16276] quota [ 337.863679][T16276] pkttype [ 337.863679][T16276] physdev [ 337.863679][T16276] cgroup [ 337.863679][T16276] cgroup [ 337.863679][T16276] cgroup [ 337.863679][T16276] owner [ 337.863679][T16276] nfacct [ 337.863679][T16276] nfacct [ 337.863679][T16276] mac [ 337.863679][T16276] limit [ 337.863679][T16276] ipvs [ 337.863679][T16276] helper [ 337.863679][T16276] devgroup [ 337.863679][T16276] cpu [ 337.863679][T16276] conntrack [ 337.863679][T16276] conntrack [ 337.863679][T16276] conntrack [ 337.863679][T16276] connlabel [ 337.863679][T16276] connbytes [ 337.863679][T16276] comment [ 337.863679][T16276] bpf [ 337.863679][T16276] bpf [ 337.863679][T16276] connmark [ 337.863679][T16276] mark [ 337.863679][T16276] rpfilter [ 337.863679][T16276] ah [ 337.863679][T16276] tcpmss [ 337.863679][T16276] socket [ 337.863679][T16276] socket [ 337.863679][T16276] socket [ 337.863679][T16276] socket [ 337.863679][T16276] sctp [ 337.863679][T16276] recent [ 337.863679][T16276] recent [ 337.863679][T16276] policy [ 337.863679][T16276] osf [ 337.863679][T16276] multiport [ 337.863679][T16276] length [ 337.863679][T16276] l2tp [ 337.863679][T16276] iprange [ 337.863679][T16276] ipcomp [ 337.863679][T16276] ttl [ 337.863679][T16276] hashlimit [ 337.863679][T16276] hashlimit [ 337.863679][T16276] hashlimit [ 337.863679][T16276] esp [ 337.863679][T16276] ecn [ 337.863679][T16276] tos [ 337.863679][T16276] dscp [ 337.863679][T16276] dccp [ 337.863679][T16276] connlimit [ 337.863679][T16276] cluster [ 337.863679][T16276] addrtype [ 337.863679][T16276] addrtype [ 337.863679][T16276] set [ 337.863679][T16276] set [ 337.863679][T16276] set [ 337.863679][T16276] set [ 337.863679][T16276] set [ 337.863679][T16276] icmp [ 337.863679][T16276] udplite [ 338.617396][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 338.666311][T16311] veth1_macvtap: left promiscuous mode [ 338.906641][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4504'. [ 338.937379][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4512'. [ 339.052196][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4512'. [ 339.423917][ T46] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 339.593677][ T46] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 339.624543][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.637558][ T46] usb 5-1: config 0 descriptor?? [ 339.645437][ T46] pwc: Samsung MPC-C10 USB webcam detected. [ 339.868262][ T46] pwc: send_video_command error -71 [ 339.886048][ T46] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 339.908757][ T46] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 339.937608][ T46] usb 5-1: USB disconnect, device number 51 [ 340.319224][T16360] IPVS: length: 20 != 520133856 [ 340.326160][ T29] audit: type=1400 audit(1737369621.620:1386): avc: denied { getopt } for pid=16359 comm="syz.2.4532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 340.366464][T16362] input: syz0 as /devices/virtual/input/input69 [ 340.421058][ T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 340.454968][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 340.603735][ T46] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 340.642216][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.667076][ T46] usb 5-1: config 0 descriptor?? [ 340.681393][ T46] pwc: Samsung MPC-C10 USB webcam detected. [ 340.906034][T16376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.914864][T16376] bond0: (slave bond2): Enslaving as an active interface with an up link [ 341.009110][ T29] audit: type=1400 audit(1737369622.310:1387): avc: denied { map } for pid=16382 comm="syz.0.4543" path="socket:[53507]" dev="sockfs" ino=53507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 341.082427][ T46] pwc: recv_control_msg error -71 req 02 val 2b00 [ 341.089691][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 341.107278][ T46] pwc: recv_control_msg error -71 req 04 val 1700 [ 341.122170][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 341.141310][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 341.163858][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 341.193787][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 341.211163][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 341.233600][T16393] mac80211_hwsim hwsim14 syzkaller0: renamed from wlan1 [ 341.240952][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 341.262268][ T46] pwc: recv_control_msg error -71 req 02 val 2200 [ 341.278996][ T46] pwc: recv_control_msg error -71 req 06 val 0600 [ 341.303065][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 341.322443][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 341.344005][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 341.371181][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 341.386969][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 341.421308][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 341.437223][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 341.452509][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 341.465057][ T46] pwc: Registered as video103. [ 341.478646][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 341.497689][T16403] netlink: 'syz.0.4553': attribute type 4 has an invalid length. [ 341.514130][ T46] usb 5-1: USB disconnect, device number 52 [ 341.542759][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4553'. [ 341.626298][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4556'. [ 341.766279][T16418] netlink: 'syz.4.4559': attribute type 39 has an invalid length. [ 341.980243][ T29] audit: type=1400 audit(1737369623.280:1388): avc: denied { mounton } for pid=16427 comm="syz.1.4564" path="/925/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 342.002692][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.030986][ T29] audit: type=1400 audit(1737369623.320:1389): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 342.051091][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.202123][ T1200] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 342.238603][ T29] audit: type=1400 audit(1737369623.540:1390): avc: denied { name_bind 0x1000000 } for pid=16436 comm="syz.4.4569" path="socket:[53589]" dev="sockfs" ino=53589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.355032][ T1200] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.375211][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 342.404076][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.431156][ T1200] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 342.451514][ T1200] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.460943][ T1200] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.469375][ T1200] usb 1-1: Manufacturer: syz [ 342.486181][ T1200] usb 1-1: config 0 descriptor?? [ 447.551982][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 447.558990][ C1] rcu: 0-...!: (1 GPs behind) idle=36fc/1/0x4000000000000000 softirq=58276/58278 fqs=0 [ 447.570317][ C1] rcu: (detected by 1, t=10506 jiffies, g=58357, q=184 ncpus=2) [ 447.578061][ C1] Sending NMI from CPU 1 to CPUs 0: [ 447.578091][ C0] NMI backtrace for cpu 0 [ 447.578114][ C0] CPU: 0 UID: 0 PID: 16416 Comm: syz.5.4560 Not tainted 6.13.0-syzkaller #0 [ 447.578137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 447.578149][ C0] RIP: 0010:kasan_check_range+0x4/0x1a0 [ 447.578187][ C0] Code: 89 43 08 5b 5d 41 5c c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <48> 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 44 0f b6 c2 48 01 f0 55 [ 447.578205][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00000086 [ 447.578222][ C0] RAX: 0000000000000000 RBX: ffff8880b862ca00 RCX: ffffffff8177334e [ 447.578235][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b862ca00 [ 447.578248][ C0] RBP: 1ffff92000000fb4 R08: 0000000000000000 R09: fffffbfff2dcaf99 [ 447.578261][ C0] R10: ffffffff96e57ccf R11: 0000000000000000 R12: ffff8880b862ca08 [ 447.578274][ C0] R13: ffff8880b862ca10 R14: ffff8880b862ca00 R15: ffffffff89419ca0 [ 447.578288][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 447.578307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.578321][ C0] CR2: 0000000020006680 CR3: 0000000037802000 CR4: 00000000003526f0 [ 447.578334][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.578345][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.578358][ C0] Call Trace: [ 447.578364][ C0] [ 447.578373][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 447.578397][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 447.578417][ C0] ? nmi_handle+0x1ac/0x5d0 [ 447.578439][ C0] ? kasan_check_range+0x4/0x1a0 [ 447.578466][ C0] ? default_do_nmi+0x6a/0x160 [ 447.578486][ C0] ? exc_nmi+0x170/0x1e0 [ 447.578505][ C0] ? end_repeat_nmi+0xf/0x53 [ 447.578533][ C0] ? __pfx_advance_sched+0x10/0x10 [ 447.578557][ C0] ? do_raw_spin_lock+0x11e/0x2c0 [ 447.578584][ C0] ? kasan_check_range+0x4/0x1a0 [ 447.578612][ C0] ? kasan_check_range+0x4/0x1a0 [ 447.578641][ C0] ? kasan_check_range+0x4/0x1a0 [ 447.578668][ C0] [ 447.578673][ C0] [ 447.578679][ C0] do_raw_spin_lock+0x11e/0x2c0 [ 447.578704][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.578735][ C0] ? lock_acquire+0x2f/0xb0 [ 447.578755][ C0] ? __hrtimer_run_queues+0x2be/0xae0 [ 447.578785][ C0] __hrtimer_run_queues+0x2be/0xae0 [ 447.578814][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 447.578840][ C0] ? read_tsc+0x9/0x20 [ 447.578869][ C0] hrtimer_interrupt+0x392/0x8e0 [ 447.578902][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 447.578926][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 447.578952][ C0] [ 447.578957][ C0] [ 447.578964][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.578993][ C0] RIP: 0010:write_comp_data+0x18/0x90 [ 447.579016][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 6f cb 69 7e 65 8b 05 70 cb 69 7e 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 [ 447.579035][ C0] RSP: 0018:ffffc9000463fbe0 EFLAGS: 00000246 [ 447.579050][ C0] RAX: 0000000080000000 RBX: ffff88805f00a440 RCX: ffffffff815bd345 [ 447.579063][ C0] RDX: ffff88805f00a440 RSI: 0000000000000000 RDI: 0000000000000007 [ 447.579076][ C0] RBP: ffffc9000463d7e0 R08: 0000000000000007 R09: 0000000000000000 [ 447.579088][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004638000 [ 447.579101][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000463f628 [ 447.579118][ C0] ? do_exit+0x1ce5/0x2d70 [ 447.579147][ C0] do_exit+0x1ce5/0x2d70 [ 447.579176][ C0] ? get_signal+0x8f7/0x26c0 [ 447.579200][ C0] ? __pfx_do_exit+0x10/0x10 [ 447.579228][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.579255][ C0] do_group_exit+0xd3/0x2a0 [ 447.579284][ C0] get_signal+0x24ed/0x26c0 [ 447.579309][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 447.579335][ C0] ? __pfx_get_signal+0x10/0x10 [ 447.579360][ C0] ? __pfx_do_futex+0x10/0x10 [ 447.579381][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 447.579410][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.579445][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 447.579472][ C0] do_syscall_64+0xda/0x250 [ 447.579499][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.579526][ C0] RIP: 0033:0x7fcc58985d29 [ 447.579544][ C0] Code: Unable to access opcode bytes at 0x7fcc58985cff. [ 447.579552][ C0] RSP: 002b:00007fcc5972d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.579570][ C0] RAX: fffffffffffffe00 RBX: 00007fcc58b75fa8 RCX: 00007fcc58985d29 [ 447.579583][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc58b75fa8 [ 447.579596][ C0] RBP: 00007fcc58b75fa0 R08: 0000000000000000 R09: 0000000000000000 [ 447.579609][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc58b75fac [ 447.579621][ C0] R13: 0000000000000000 R14: 00007ffce4ee64f0 R15: 00007ffce4ee65d8 [ 447.579640][ C0] [ 447.580090][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g58357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 448.072078][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 448.082047][ C1] rcu: RCU grace-period kthread stack dump: [ 448.087929][ C1] task:rcu_preempt state:R running task stack:28440 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 448.099720][ C1] Call Trace: [ 448.103013][ C1] [ 448.105956][ C1] __schedule+0xe58/0x5ad0 [ 448.110393][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 448.115612][ C1] ? __pfx___schedule+0x10/0x10 [ 448.120475][ C1] ? schedule+0x298/0x350 [ 448.124815][ C1] ? __pfx_lock_release+0x10/0x10 [ 448.129850][ C1] ? lock_acquire+0x2f/0xb0 [ 448.134359][ C1] ? schedule+0x1fd/0x350 [ 448.138713][ C1] schedule+0xe7/0x350 [ 448.142790][ C1] schedule_timeout+0x124/0x280 [ 448.147646][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 448.153027][ C1] ? __pfx_process_timeout+0x10/0x10 [ 448.158331][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 448.164165][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 448.169664][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 448.174441][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 448.179732][ C1] ? rcu_gp_init+0xc82/0x1630 [ 448.184420][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 448.189631][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.195451][ C1] rcu_gp_kthread+0x271/0x380 [ 448.200137][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.205344][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 448.210558][ C1] ? __kthread_parkme+0x148/0x220 [ 448.215594][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.220799][ C1] kthread+0x2c1/0x3a0 [ 448.224875][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.230082][ C1] ? __pfx_kthread+0x10/0x10 [ 448.234684][ C1] ret_from_fork+0x45/0x80 [ 448.239106][ C1] ? __pfx_kthread+0x10/0x10 [ 448.243707][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.248504][ C1] [ 448.251522][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 448.257848][ C1] CPU: 1 UID: 0 PID: 16434 Comm: syz.5.4560 Not tainted 6.13.0-syzkaller #0 [ 448.266527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 448.276580][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 448.283361][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 448.302976][ C1] RSP: 0018:ffffc90003d1f878 EFLAGS: 00000293 [ 448.309047][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e08bc [ 448.317021][ C1] RDX: ffff888059414880 RSI: ffffffff818e0896 RDI: 0000000000000005 [ 448.324994][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 448.332971][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170c8d39 [ 448.340941][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 448.348914][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 448.357850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.364442][ C1] CR2: 00007f49428a56c0 CR3: 0000000032656000 CR4: 00000000003526f0 [ 448.372416][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.380388][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.388368][ C1] Call Trace: [ 448.391644][ C1] [ 448.394497][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 448.400840][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 448.406052][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 448.411533][ C1] ? timekeeping_advance+0x72e/0xa90 [ 448.416823][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 448.422470][ C1] ? __asan_memcpy+0x3c/0x60 [ 448.427065][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 448.432376][ C1] ? rcu_is_watching+0x12/0xc0 [ 448.437157][ C1] ? update_process_times+0x178/0x2d0 [ 448.442538][ C1] ? __pfx_update_process_times+0x10/0x10 [ 448.448267][ C1] ? update_wall_time+0x1c/0x40 [ 448.453125][ C1] ? tick_nohz_handler+0x376/0x530 [ 448.458252][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 448.463724][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 448.469117][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 448.474846][ C1] ? read_tsc+0x9/0x20 [ 448.478937][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 448.484072][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 448.490236][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 448.496051][ C1] [ 448.498981][ C1] [ 448.501912][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.508092][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 448.514171][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 448.520274][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 448.526362][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 448.532442][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 448.537833][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 448.543048][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 448.548172][ C1] flush_tlb_mm_range+0x289/0x330 [ 448.553213][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 448.557912][ C1] exit_mmap+0x3df/0xb20 [ 448.562169][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 448.566946][ C1] ? __pfx_mark_lock+0x10/0x10 [ 448.571740][ C1] __mmput+0x12a/0x4c0 [ 448.575816][ C1] mmput+0x62/0x70 [ 448.579545][ C1] do_exit+0x9ba/0x2d70 [ 448.583719][ C1] ? get_signal+0x8f7/0x26c0 [ 448.588323][ C1] ? __pfx_do_exit+0x10/0x10 [ 448.592931][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 448.597966][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.603355][ C1] do_group_exit+0xd3/0x2a0 [ 448.607875][ C1] get_signal+0x24ed/0x26c0 [ 448.612398][ C1] ? __pfx___blk_flush_plug+0x10/0x10 [ 448.617779][ C1] ? __pfx___up_read+0x10/0x10 [ 448.622551][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 448.627929][ C1] ? __pfx_get_signal+0x10/0x10 [ 448.632791][ C1] ? __pfx_do_futex+0x10/0x10 [ 448.637561][ C1] arch_do_signal_or_restart+0x90/0x7e0 [ 448.643128][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 448.649300][ C1] ? rcu_is_watching+0x12/0xc0 [ 448.654084][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 448.659728][ C1] do_syscall_64+0xda/0x250 [ 448.664241][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.670148][ C1] RIP: 0033:0x7fcc58985d29 [ 448.674562][ C1] Code: Unable to access opcode bytes at 0x7fcc58985cff. [ 448.681574][ C1] RSP: 002b:00007fcc5970c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 448.689992][ C1] RAX: fffffffffffffe00 RBX: 00007fcc58b76088 RCX: 00007fcc58985d29 [ 448.697963][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcc58b76088 [ 448.705935][ C1] RBP: 00007fcc58b76080 R08: 0000000000000000 R09: 0000000000000000 [ 448.713904][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc58b7608c [ 448.721872][ C1] R13: 0000000000000000 R14: 00007ffce4ee64f0 R15: 00007ffce4ee65d8 [ 448.729947][ C1]